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WHAT IS CLAIMED IS : 

1. A method for using a protected document, comprising: 

receiving a document usage request for using the protected document 

in a session; 

authenticating the protected document; 

authorizing usage of the protected document; 

creating a session key for the session; 

issuing a proxy key that delegates decryption to the session; 

rendering the protected document; 

performing proxy transformation on the rendered document using the 

proxy key; and 

decrypting the proxy transformed document using the session key. 

2. The method for using a protected document of claim 1, further 
comprising: 

retrieving terms and conditions of the session; 

retrieving usage parameters and system resource information for the 

session; and 

comparing the retrieved usage parameters and system resources and the 
retrieved terms and conditions, wherein the authorized usage is based on comparison 
results of the retrieved usage parameters and system resources and the retrieved terms 
and conditions. 

3. The method for using a protected document of claim 2, wherein the 
retrieved terms and conditions are associated with at least one of identification of the 
protected document and usage type. 

4. The method for using a protected document of claim I, wherein the 
document usage request contains at least one of document identification, usage type, 
and user identification. 

5. The method for using a protected document of claim 1 , wherein 
authenticating the protected document comprises at least one of: 

checking a digital signature associated with the protected document; 

and 

verifying integrity of each component of the protected document. 
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6. A usage authorization system for using a protected document, 
comprising: 

a request receiving device that receives a document usage request for 
using the protected document in a session; 
5 a document processing device that authenticates the protected 

document; 

a document source that authorizes usage of the protected document, 
and issues a proxy key that delegates decryption to the session; 

an access device that, along with the document device, creates a 
10 session key for the session, 

wherein the document processing device renders the protected 
document, performs proxy transformation on the rendered document using the proxy 
keys, and decrypts the proxy transformed document using the session key. 

7. The usage authorization system for using a protected document of 
15 claim 6, wherein the document source retrieves terms and conditions of the session, 

retrieves usage parameters and system resource information for the session, and 
compares the retrieved usage parameters and system resources and the retrieved terms * 
and conditions, the authorized usage being based on comparison results of the 
retrieved usage parameters and system resources and the retrieved terms and 
20 conditions. 

8. The usage authorization system for using a protected document of 
claim 7, wherein the retrieved terms and conditions are associated with at least one of 
identification of the protected document and usage type. 

9. The usage authorization system for using a protected document of 
25 claim 6, wherein the document usage request contains at least one of document 

identification, usage type, and user identification. 

10. The usage authorization system for using a protected document of 
claim 6, wherein the document processing device authenticates the protected 
document by at least one of: 

30 checking a digital signature associated with the protected document; 

and 

verifying integrity of each component of the protected document. 



